@hecks/client 3.0.4 → 3.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +6 -6
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -276,7 +276,7 @@ The hermetic tests run a protocol scenario against an in-process fake of the
|
|
|
276
276
|
host. `npm run test:contract` runs the same scenario against a live host; see
|
|
277
277
|
`test/contract.mjs`. The repository's `client-contract` workflow starts
|
|
278
278
|
`rust/host` on the `spec/fixtures/rust_host/checkout_fixture` domain and runs
|
|
279
|
-
it. To do the same locally, build that domain with `hecks build_wasm`, start
|
|
279
|
+
it. To do the same locally, build that domain with `hecks build.build_wasm`, start
|
|
280
280
|
`rust/host`'s `bootstrap` binary with `HECKS_SERVE_MODE=1`, `HECKS_DOMAIN`,
|
|
281
281
|
`HECKS_WASM_PATH`, `HECKS_IR_PATH` and `DATABASE_URL` (a Postgres database), and
|
|
282
282
|
run `HECKS_SERVICE_URL=http://127.0.0.1:<port> npm run test:contract`. Add
|
|
@@ -288,7 +288,7 @@ routes (it started with `HECKS_CHECKOUT_DOMAIN` naming its domain) to check the
|
|
|
288
288
|
|
|
289
289
|
The package version equals `Hecks::VERSION` and is released together with the
|
|
290
290
|
gem; `spec/hecks_client_version_spec.rb` fails when they differ, and
|
|
291
|
-
`hecks publish` (and `hecks publish_gem` on its own) refuses to publish while they do. When
|
|
291
|
+
`hecks publishing_run.publish` (and `hecks publishing_run.publish_gem` on its own) refuses to publish while they do. When
|
|
292
292
|
`lib/hecks/version.rb` changes, bump the package in the same change:
|
|
293
293
|
|
|
294
294
|
```sh
|
|
@@ -299,8 +299,8 @@ npm version <version> --no-git-tag-version # also updates package-lock.json
|
|
|
299
299
|
Pushing the release tag starts `.github/workflows/publish-client.yml`, which
|
|
300
300
|
publishes the package with npm trusted publishing: a short-lived identity
|
|
301
301
|
token from the workflow run, so no npm token and no one-time code is stored
|
|
302
|
-
anywhere. `hecks publish` pushes the tag, publishes the gem, and waits for the
|
|
303
|
-
package to appear on npm (`hecks publish --npm-only` waits again after a
|
|
302
|
+
anywhere. `hecks publishing_run.publish` pushes the tag, publishes the gem, and waits for the
|
|
303
|
+
package to appear on npm (`hecks publishing_run.publish --npm-only` waits again after a
|
|
304
304
|
re-run; a version npm already has is skipped).
|
|
305
305
|
|
|
306
306
|
One-time setup, by an owner of the `@hecks` scope, once the package exists:
|
|
@@ -309,10 +309,10 @@ Actions > organization or user `heckslabs`, repository `hecks`, workflow
|
|
|
309
309
|
filename `publish-client.yml`, environment blank.
|
|
310
310
|
|
|
311
311
|
The first publish, before that can be configured, and any emergency when CI is
|
|
312
|
-
down, is `hecks publish --npm-local`. It publishes from this machine with a
|
|
312
|
+
down, is `hecks publishing_run.publish --npm-local`. It publishes from this machine with a
|
|
313
313
|
token held in 1Password: the "publish token" field on the "npmjs.com" item in
|
|
314
314
|
the Hecks vault (`release/npm_publish.env` names the vault, item and field;
|
|
315
|
-
the setup is in the header of `hecks publish`). That token must be a granular
|
|
315
|
+
the setup is in the header of `hecks publishing_run.publish`). That token must be a granular
|
|
316
316
|
token scoped Read and write to the `@hecks` scope with "Bypass two-factor
|
|
317
317
|
authentication" enabled, and short-lived: the account's second factor is a
|
|
318
318
|
passkey, so a token that requires a one-time code cannot publish (npm answers
|
package/package.json
CHANGED